ScriptLogic $LOGS Share Remote Information Disclosure

Low Nessus Plugin ID 11561


Sensitive data may be accessed on the remote server.


The remote host has an accessible LOGS$ share.

ScriptLogic creates this share to store the logs, but does not properly set the permissions on it. As a result, anyone can use it to read or modify, or possibily execute code.


Limit access to this share to the backup account and domain administrator.

Plugin Details

Severity: Low

ID: 11561

File Name: scriptlogic_hidden_share.nasl

Version: $Revision: 1.16 $

Type: local

Agent: windows

Family: Windows

Published: 2003/05/04

Modified: 2015/01/12

Dependencies: 10150, 10394

Risk Information

Risk Factor: Low


Base Score: 2.1

Temporal Score: 1.8

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N

Temporal Vector: CVSS2#E:H/RL:OF/RC:C

Vulnerability Information

Required KB Items: SMB/name, SMB/login, SMB/password, SMB/transport

Exploit Available: true

Exploit Ease: No exploit is required

Vulnerability Publication Date: 2003/05/01

Reference Information

CVE: CVE-2003-1122

BID: 7476

OSVDB: 15656

CERT: 813737